A company created an external application for its customers. A security researcher now reports that the application has a serious LDAP injection vulnerability that could be leveraged to bypass…

The correct answer is A. Conduct input sanitization. E. Deploy a WAF. Conduct input sanitization: The primary safeguard against LDAP injection is to validate and cleanse all user-supplied inputs before they’re incorporated into LDAP queries. By enforcing strict whitelists (allowing only expected characters or patterns) and escaping or rejecting…

Submitted by ravi_2018· Mar 6, 2026Security Engineering

Question

A company created an external application for its customers. A security researcher now reports that the application has a serious LDAP injection vulnerability that could be leveraged to bypass authentication and authorization. Which of the following actions would best resolve the issue? (Choose two.)

Options

AConduct input sanitization.
BDeploy a SIEM.
CUse containers.
DPatch the OS.
EDeploy a WAF.
FDeploy a reverse proxy.
GDeploy an IDS.

How the community answered

(16 responses)

A
75% (12)
B
6% (1)
D
6% (1)
F
13% (2)

Explanation

Conduct input sanitization: The primary safeguard against LDAP injection is to validate and cleanse all user-supplied inputs before they’re incorporated into LDAP queries. By enforcing strict whitelists (allowing only expected characters or patterns) and escaping or rejecting any special LDAP-filter metacharacters, you eliminate the injection vectors at the source. Deploy a WAF: While you’re remediating the code, a properly configured Web Application Firewall can provide an additional layer of defense by detecting and blocking known LDAP injection payloads (e.g., )(uid=))(|(uid=*) in incoming requests. This helps mitigate exploitation risk in the short term and serves as a compensating control until the application is fully secured.

Community Discussion

No community discussion yet for this question.

Full CAS-005 Practice